Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/OAKbwNcoTFrmc6X-1ySQeQStuV0.roa
File: OAKbwNcoTFrmc6X-1ySQeQStuV0.roa (raw, json)
Hash identifier: Sn7quVyPECbT74MLheKF9c6FXd39EBQJmYCQ61NkABQ=
Subject key identifier: 38:02:9B:C0:D7:28:4C:5A:E6:73:A5:FE:D7:24:90:79:04:AD:B9:5D
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 0185719E62D005FCA04C478F746227F19D5F
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/OAKbwNcoTFrmc6X-1ySQeQStuV0.roa
Signing time: Mon 02 Jan 2023 08:34:43 +0000
ROA not before: Mon 02 Jan 2023 08:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207148
IP address blocks: 5.154.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:62:d0:05:fc:a0:4c:47:8f:74:62:27:f1:9d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jan 2 08:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38029bc0d7284c5ae673a5fed724907904adb95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:b3:52:be:4e:67:1d:4d:a3:86:c5:c2:05:
3f:f7:fd:9f:cb:f8:6b:1d:04:9f:d6:03:4c:d5:ad:
ae:22:14:4d:bf:ab:97:fe:e2:4d:c6:80:39:49:42:
84:4d:f3:28:ce:6d:b7:38:6a:7c:82:d7:1c:87:4b:
d8:d6:49:84:0c:6b:95:9d:1b:af:88:a2:37:6b:ad:
4c:06:cb:01:52:0c:6b:13:b5:2a:ad:29:db:8a:e0:
cd:16:5b:be:f7:59:0f:02:7a:7a:b2:32:f2:7a:c4:
2f:bb:6e:e4:fb:78:ee:d6:c9:81:de:42:a6:5a:5f:
85:e8:f8:cf:46:a0:a4:53:3e:7d:b2:93:fd:c7:b9:
98:ed:02:c2:51:87:fd:b9:64:a4:61:d6:67:4e:6c:
e9:62:71:96:bf:ab:31:a2:ea:df:f8:d7:97:48:81:
b6:c6:d6:51:8a:89:ef:1d:c8:41:aa:9b:28:57:b6:
41:6d:47:52:f8:cb:e9:de:c3:70:08:43:78:ce:82:
fd:8c:1f:d9:0b:4c:8c:7e:ee:f2:b7:78:62:e0:f8:
6a:2b:61:7d:5b:6f:66:9b:67:e4:e7:a3:3f:b5:45:
c9:10:c8:c7:97:54:30:98:5c:f6:9c:f3:ca:1f:94:
47:99:ef:21:13:0f:e5:22:54:db:9b:89:61:81:3d:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:02:9B:C0:D7:28:4C:5A:E6:73:A5:FE:D7:24:90:79:04:AD:B9:5D
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/OAKbwNcoTFrmc6X-1ySQeQStuV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:01:ec:6b:c3:54:e7:fe:de:82:51:45:66:23:98:0a:7b:bf:
dd:43:38:c8:68:76:7f:f4:72:33:fd:54:7d:d4:4c:4e:c2:49:
09:da:2b:33:76:ef:99:29:6b:2b:9d:53:44:3a:37:89:19:80:
9a:00:33:89:9b:36:b6:b9:c3:f8:c2:7d:dc:3a:71:49:e3:0d:
f3:5a:76:34:c8:7b:e3:54:db:84:f5:05:85:e9:15:62:2a:6a:
a6:74:73:bf:1d:4a:40:60:73:31:33:ab:e5:37:ca:13:10:40:
93:f0:f6:b5:62:23:9a:8a:8a:9d:1e:d5:aa:cc:11:fa:00:46:
f1:32:51:30:e0:17:24:44:62:8f:36:3f:e8:95:41:47:2b:2c:
03:f0:c8:8d:69:74:f3:06:c8:25:86:bd:73:30:1f:65:76:3b:
0e:cd:b2:10:6c:e0:80:6d:20:fc:95:c4:fa:bf:f6:93:c7:09:
59:65:67:21:f5:0a:d6:46:1e:bf:75:70:11:f3:cf:87:79:0c:
26:6a:05:35:da:c2:c5:a7:34:79:d1:45:e6:68:9a:b0:7b:3d:
c9:d3:da:79:5a:3b:5b:be:67:e3:0b:4e:1d:d3:8a:52:4a:12:
7e:ff:86:c6:9c:7b:d1:17:7b:38:38:a8:9a:a2:ef:1f:95:8b:
b0:3c:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:57 2024 by rpki-client on console-ams.rpki-client.org